AJ
Product
Apache Jackrabbit
by Apache Software Foundation · last CVE Oct 7, 2026
2
CVEs
0
On KEV
9.1
Max CVSS
2
New 30D
Severity mix
Critical 1High 0Medium 1Low 0
Watch

Add Apache Jackrabbit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-92415
5.3
1%
Oct 7
Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies
Affected: 2.23.0 through 2.23.5; 2.22.0 through 2.22.4; 2.20.0 through 2.20.17
Showing 1